Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x prior to 4.0.7 IF5, and 5.x prior to 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 up to and including 2.0.1, 3.0 up to and including 3.0.1.6, 4.0 up to and including 4.0.7, and 5.0 up to and including 5.0.2; Rational Team Concert (RTC) 2.0 up to and including 2.0.0.2, 3.x prior to 3.0.1.6 IF6, 4.x prior to 4.0.7 IF5, and 5.x prior to 5.0.2 IF4; Rational Requirements Composer (RRC) 2.0 up to and including 2.0.0.4, 3.x prior to 3.0.1.6 IF6, and 4.0 up to and including 4.0.7; Rational DOORS Next Generation (RDNG) 4.x prior to 4.0.7 IF5 and 5.x prior to 5.0.2 IF4; Rational Engineering Lifecycle Manager (RELM) 1.0 up to and including 1.0.0.1, 4.0.3 up to and including 4.0.7, and 5.0 up to and including 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 up to and including 3.0.1, 4.0 up to and including 4.0.7, and 5.0 up to and including 5.0.2; and Rational Software Architect Design Manager (RSA DM) 3.0 up to and including 3.0.1, 4.0 up to and including 4.0.7, and 5.0 up to and including 5.0.2 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm rational requirements composer 2.0 |
||
ibm rational requirements composer 2.0.0.1 |
||
ibm rational requirements composer 2.0.0.2 |
||
ibm rational requirements composer 4.0.0 |
||
ibm rational requirements composer 4.0.0.1 |
||
ibm rational requirements composer 4.0.0.2 |
||
ibm rational requirements composer 4.0.1 |
||
ibm rational requirements composer 4.0.2 |
||
ibm rational requirements composer 3.0.1.1 |
||
ibm rational requirements composer 3.0.1.2 |
||
ibm rational requirements composer 3.0.1.3 |
||
ibm rational requirements composer 3.0.1.4 |
||
ibm rational requirements composer 4.0.7 |
||
ibm rational requirements composer 2.0.0.4 |
||
ibm rational requirements composer 3.0.1 |
||
ibm rational requirements composer 3.0.1.5 |
||
ibm rational requirements composer 3.5 |
||
ibm rational requirements composer 4.0.3 |
||
ibm rational requirements composer 4.0.5 |
||
ibm rational requirements composer 2.0.0.3 |
||
ibm rational requirements composer 3.0 |
||
ibm rational requirements composer 3.0.1.6 |
||
ibm rational requirements composer 4.0 |
||
ibm rational requirements composer 4.0.4 |
||
ibm rational requirements composer 4.0.6 |
||
ibm rhapsody design manager 4.0.3 |
||
ibm rhapsody design manager 4.0.4 |
||
ibm rhapsody design manager 4.0.5 |
||
ibm rhapsody design manager 4.0.6 |
||
ibm rhapsody design manager 3.0.0 |
||
ibm rhapsody design manager 3.0.0.1 |
||
ibm rhapsody design manager 4.0.0 |
||
ibm rhapsody design manager 4.0.2 |
||
ibm rhapsody design manager 4.0.7 |
||
ibm rhapsody design manager 5.0.2 |
||
ibm rhapsody design manager 3.0.1 |
||
ibm rhapsody design manager 4.0.1 |
||
ibm rhapsody design manager 5.0 |
||
ibm rational team concert 2.0 |
||
ibm rational team concert 2.0.0.1 |
||
ibm rational team concert 2.0.0.2 |
||
ibm rational team concert 3.0 |
||
ibm rational team concert 4.0.3 |
||
ibm rational team concert 4.0.4 |
||
ibm rational team concert 4.0.5 |
||
ibm rational team concert 4.0.6 |
||
ibm rational team concert 3.0.1.4 |
||
ibm rational team concert 3.0.1.5 |
||
ibm rational team concert 3.0.1.6 |
||
ibm rational team concert 4.0 |
||
ibm rational team concert 3.0.1 |
||
ibm rational team concert 3.0.1.2 |
||
ibm rational team concert 4.0.0.2 |
||
ibm rational team concert 4.0.2 |
||
ibm rational team concert 4.0.7 |
||
ibm rational team concert 5.0.1 |
||
ibm rational team concert 3.0.1.1 |
||
ibm rational team concert 3.0.1.3 |
||
ibm rational team concert 4.0.0.1 |
||
ibm rational team concert 4.0.1 |
||
ibm rational team concert 5.0.0 |
||
ibm rational team concert 5.0.2 |
||
ibm rational quality manager 4.0.4 |
||
ibm rational quality manager 4.0.5 |
||
ibm rational quality manager 4.0.7 |
||
ibm rational quality manager 3.0.1.6 |
||
ibm rational quality manager 5.0.0 |
||
ibm rational quality manager 5.0.2 |
||
ibm rational quality manager 4.0 |
||
ibm rational quality manager 4.0.0.1 |
||
ibm rational quality manager 3.0.1.1 |
||
ibm rational quality manager 3.0.1 |
||
ibm rational quality manager 3.0 |
||
ibm rational quality manager 2.0 |
||
ibm rational quality manager 4.0.0.2 |
||
ibm rational quality manager 4.0.2 |
||
ibm rational quality manager 3.0.1.4 |
||
ibm rational quality manager 3.0.1.2 |
||
ibm rational quality manager 2.0.1 |
||
ibm rational quality manager 2.0.0.2 |
||
ibm rational quality manager 4.0.1 |
||
ibm rational quality manager 4.0.3 |
||
ibm rational quality manager 3.0.1.5 |
||
ibm rational quality manager 3.0.1.3 |
||
ibm rational quality manager 2.0.0.1 |
||
ibm rational software architect design manager 3.0.0.1 |
||
ibm rational software architect design manager 3.0.1 |
||
ibm rational software architect design manager 4.0.0 |
||
ibm rational software architect design manager 4.0.1 |
||
ibm rational software architect design manager 4.0.6 |
||
ibm rational software architect design manager 4.0.7 |
||
ibm rational software architect design manager 5.0.1 |
||
ibm rational software architect design manager 5.0.2 |
||
ibm rational software architect design manager 3.0.0 |
||
ibm rational software architect design manager 4.0.2 |
||
ibm rational software architect design manager 4.0.4 |
||
ibm rational software architect design manager 4.0.3 |
||
ibm rational software architect design manager 4.0.5 |
||
ibm rational collaborative lifecycle management 3.0.1.3 |
||
ibm rational collaborative lifecycle management 3.0.1.4 |
||
ibm rational collaborative lifecycle management 3.0.1.5 |
||
ibm rational collaborative lifecycle management 3.0.1.6 |
||
ibm rational collaborative lifecycle management 4.0.0 |
||
ibm rational collaborative lifecycle management 4.0.5 |
||
ibm rational collaborative lifecycle management 4.0.6 |
||
ibm rational collaborative lifecycle management 4.0.7 |
||
ibm rational collaborative lifecycle management 5.0.0 |
||
ibm rational collaborative lifecycle management 3.0.1 |
||
ibm rational collaborative lifecycle management 3.0.1.2 |
||
ibm rational collaborative lifecycle management 4.0.2 |
||
ibm rational collaborative lifecycle management 4.0.4 |
||
ibm rational collaborative lifecycle management 5.0.1 |
||
ibm rational collaborative lifecycle management 3.0.1.1 |
||
ibm rational collaborative lifecycle management 4.0.1 |
||
ibm rational collaborative lifecycle management 4.0.3 |
||
ibm rational collaborative lifecycle management 5.0.2 |
||
ibm rational doors next generation 4.0.1 |
||
ibm rational doors next generation 4.0.2 |
||
ibm rational doors next generation 4.0.3 |
||
ibm rational doors next generation 4.0.4 |
||
ibm rational doors next generation 5.0.2 |
||
ibm rational doors next generation 4.0.6 |
||
ibm rational doors next generation 5.0.1 |
||
ibm rational doors next generation 4.0.0 |
||
ibm rational doors next generation 4.0.5 |
||
ibm rational doors next generation 4.0.7 |
||
ibm rational engineering lifecycle manager 5.0.1 |
||
ibm rational engineering lifecycle manager 5.0.2 |
||
ibm rational engineering lifecycle manager 1.0 |
||
ibm rational engineering lifecycle manager 1.0.0.1 |
||
ibm rational engineering lifecycle manager 4.0.3 |
||
ibm rational engineering lifecycle manager 4.0.5 |
||
ibm rational engineering lifecycle manager 4.0.7 |
||
ibm rational engineering lifecycle manager 4.0.4 |
||
ibm rational engineering lifecycle manager 4.0.6 |
Vulmon